API changelog
Every release, newest first — what was added, what broke, and when each version goes away.
Versions
Current
First public release — authentication, the read path and cursor paging.
Released July 1, 2026 · supported through at least July 1, 2027 · Read the 2026-07 reference
- AddedKey-based authentication via X-SlabDynasty-Access-Token or Authorization: Bearer, with per-environment live and test keys.
- AddedGET /ping — verifies a credential end to end without requiring any scope.
- AddedGET /products.json and GET /products/{id}.json — marketplace listings in Shopify's product shape, one variant per listing.
- AddedGET /inventory_items.json — cards as inventory items, with the grading cert as the sku.
- AddedGET /inventory_levels.json — per-card availability, always accompanied by slab_unavailable_reason and slab_can_reactivate so a zero is never ambiguous.
- AddedGET /locations.json — the seller's own inventory and the Slab Dynasty vault, both read-only.
- AddedGET /orders.json and GET /orders/{id}.json — every sale as a Shopify order: order code, what the buyer paid, financial and fulfillment status, your ship-to-hub leg, verification and payout. ?status= takes open, closed, cancelled or any (the default).
- AddedCursor pagination via the Link header, with the filter set hashed into the cursor so changing a filter mid-walk is rejected rather than silently skipping rows.
- AddedLeaky-bucket rate limiting reported in X-SlabDynasty-Api-Call-Limit, in the same used/capacity shape Shopify uses.
- AddedError envelopes matching Shopify's two shapes, plus an additive slab_error object carrying a stable machine-readable code and the request id.
Every version is supported for at least 12 months from release. Deprecated versions keep working until their sunset date and their responses carry Sunset and Deprecation headers throughout, so a pinned integration finds out from its own logs.